KLA12208 Multiple vulnerabilities in Cisco Jabber

Multiple vulnerabilities were found in Cisco Jabber. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Cisco Jabber for Windows can be exploited remotely via special crafted messages to obtain sensitive information.
2. A denial of service vulnerability in Cisco Jabber can be exploited remotely via special crafted messages to cause denial of service.

Original advisories

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

Related products

Cisco-Jabber

CVE list

CVE-2021-1569 high

CVE-2021-1570 high

Solution

Update to the latest version

Download Cisco Jabber

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Cisco Jabber earlier than 14.0.1